input { stdin { } jdbc { jdbc_connection_string => "jdbc:oracle:thin:@//172.25.2.44:1528/gras" jdbc_user => "graopr" jdbc_password => "life12345" jdbc_driver_library => "/data/fude/es/logstash-6.1.1/oraclesyc/ojdbc14-10.2.0.4.0.jar" jdbc_driver_class => "Java::oracle.jdbc.driver.OracleDriver" jdbc_paging_enabled => "true" jdbc_page_size => "50000000" statement_filepath => "/data/fude/es/logstash-6.1.1/bin/policyinfo.sql" use_column_value => "false" record_last_run => "true" last_run_metadata_path => "/data/fude/es/logstash-6.1.1/oraclesyc/synclogs/policyinfo.txt" tracking_column => "po_policy_no" clean_run => "false" schedule => "*/5 * * * * *" } } filter { json { source => "message" remove_field => ["host", "@timestamp", "httpversion", "@version"] } date{ match => ["timestamp","yyyy-MM-dd-HH:mm:ss"] locale => "cn" } } output { elasticsearch { hosts => ["http://172.25.2.150:9200","http://172.25.2.151:9200","http://172.25.2.152:9200","http://172.25.2.153:9200"] index => "policyinfo" document_id => "%{po_policy_no}" } stdout {} }